Defend against prompt injection you cannot fully prevent — assume it succeeds and limit the blast radius, separate untrusted data from instructions, filter input and output, and apply least privilege.
Loading content...